The /r/netsec Monthly Discussion Thread - April 2020 Security News & Discussion

The /r/netsec Monthly Discussion Thread - April 2020
/r/netsec's Q2 2020 Information Security Hiring Thread
Understanding NTLM Relay in DEPTH
How to SSH Properly
Attacking Secondary Contexts in Web Applications [slides]
Exploiting SMBGhost (CVE-2020-0796) for a Local Privilege Escalation: Writeup + POC
FreeMarker SSTI on Lithium CMS
Violating Your Personal Space with Webex

The /r/netsec Monthly Discussion Thread - April 2020

Posted: 31 Mar 2020 09:36 PM PDT

Overview

Questions regarding netsec and discussion related directly to netsec are welcome here.

Rules & Guidelines

Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
Avoid use of memes. If you have something to say, say it with real words.
All discussions and questions should directly relate to netsec.
No tech support is to be requested or provided on /r/netsec.

As always, the content & discussion guidelines should also be observed on /r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

submitted by /u/AutoModerator
[link] [comments]

/r/netsec's Q2 2020 Information Security Hiring Thread

Posted: 01 Apr 2020 12:35 PM PDT

Overview

If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.

We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.

Please reserve top level comments for those posting open positions.

Rules & Guidelines

Include the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.

If you are a third party recruiter, you must disclose this in your posting.
Please be thorough and upfront with the position details.
Use of non-hr'd (realistic) requirements is encouraged.
While it's fine to link to the position on your companies website, provide the important details in the comment.
Mention if applicants should apply officially through HR, or directly through you.
Please clearly list citizenship, visa, and security clearance requirements.

You can see an example of acceptable posts by perusing past hiring threads.

Feedback

Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

submitted by /u/ranok
[link] [comments]

Understanding NTLM Relay in DEPTH

Posted: 01 Apr 2020 09:22 AM PDT

submitted by /u/hackndo
[link] [comments]

How to SSH Properly

Posted: 01 Apr 2020 10:12 AM PDT

submitted by /u/benarent
[link] [comments]

Attacking Secondary Contexts in Web Applications [slides]

Posted: 01 Apr 2020 05:56 AM PDT